Annex 2 – Schedule of personal information shared

Depending on the circumstances, your information may be shared in accordance with the following.

Third party	Purpose
The Trust's external customer contact and mailing service providers.	For the management of our inbound calls, digital and email enquiries, and inbound/outbound mail.
The Information Commissioner’s Office	Where relevant, to comply with data protection and information governance requirements.
The Charity Commission	Where relevant, to comply with legislative and regulatory requirements.
Official authorities, organisations, and regulators (e.g., police, Trading Standards, DVLA, HMRC, Fire and Rescue Services, CCTV operators, The Environment Agency, insurance companies).	For official Trust business (e.g., identification, evidential and instigative purposes), or where there is otherwise a lawful basis to share the information, or the information sharing is exempt from the provision of the UK GDPR barring disclosure (for example where the police request information for the purpose of criminal investigations).
Information technology partners	Where contact his made via email, to ensure the safety and security of emails received into our server.

Last Edited: 25 July 2025

Stay connected